ZyXEL Communications ZYWALL USG 2000 Support Notes page 81

ZyWALL USG 2000 Support Notes
concentrator. If this tunnel is already included in the concentrator, user doesn't need to add any
policy route to the VPN tunnel.
Now after the VPN concentrator setup, all the remote VPN tunnels have been linked to the HQ
concentrator and remote sites can reach other remote sites via HQ.
The VPN concentrator is designed to route the remote sites' VPN traffic. However, user still
needs to setup the policy route for local subnet VPN traffic. For example, if we setup the VPN
concentrator only for HQ and remote sites A & B, then the A subnet can connect to B subnet
but HQ subnet can't connect to neither A nor B subnet.
Thus, this depends on how customers want to deploy their Global VPN network.
We can add the following policy route to allow the HQ subnet to connect with all the
concentrator's remote subnets.
81
All contents copyright (c) 2008 ZyXEL Communications Corporation.